Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. Google Cloud (GCP) Classic
  4. API Docs
  5. chronicle
  6. Parser
Viewing docs for Google Cloud v9.28.0
published on Monday, Jun 22, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

gcp.chronicle.Parser

gcp logo
Viewing docs for Google Cloud v9.28.0
published on Monday, Jun 22, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-gcp

    A parser is a configuration that parses raw logs of a specific log type into Unified Data Model (UDM) events. Chronicle supports both customer-created custom parsers and Google-provided prebuilt parsers.

    To get more information about Parser, see:

    Example Usage

    Chronicle Parser Basic

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const example = new gcp.chronicle.Parser("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    logtype: "WINDOWS_DHCP",
    validationSkipped: true,
    cbn: "ZHVtbXkgcGFyc2VyIGNvbmZpZw==",
});

    import pulumi
import pulumi_gcp as gcp

example = gcp.chronicle.Parser("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    logtype="WINDOWS_DHCP",
    validation_skipped=True,
    cbn="ZHVtbXkgcGFyc2VyIGNvbmZpZw==")

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/chronicle"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewParser(ctx, "example", &chronicle.ParserArgs{
			Location:          pulumi.String("us"),
			Instance:          pulumi.String("00000000-0000-0000-0000-000000000000"),
			Logtype:           pulumi.String("WINDOWS_DHCP"),
			ValidationSkipped: pulumi.Bool(true),
			Cbn:               pulumi.String("ZHVtbXkgcGFyc2VyIGNvbmZpZw=="),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var example = new Gcp.Chronicle.Parser("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        Logtype = "WINDOWS_DHCP",
        ValidationSkipped = true,
        Cbn = "ZHVtbXkgcGFyc2VyIGNvbmZpZw==",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.chronicle.Parser;
import com.pulumi.gcp.chronicle.ParserArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Parser("example", ParserArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .logtype("WINDOWS_DHCP")
            .validationSkipped(true)
            .cbn("ZHVtbXkgcGFyc2VyIGNvbmZpZw==")
            .build());

    }
}

    resources:
  example:
    type: gcp:chronicle:Parser
    properties:
      location: us
      instance: 00000000-0000-0000-0000-000000000000
      logtype: WINDOWS_DHCP
      validationSkipped: true
      cbn: ZHVtbXkgcGFyc2VyIGNvbmZpZw==

    pulumi {
  required_providers {
    gcp = {
      source = "pulumi/gcp"
    }
  }
}

resource "gcp_chronicle_parser" "example" {
  location           = "us"
  instance           = "00000000-0000-0000-0000-000000000000"
  logtype            = "WINDOWS_DHCP"
  validation_skipped = true
  cbn                = "ZHVtbXkgcGFyc2VyIGNvbmZpZw=="
}

    Chronicle Parser Full

    import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const example = new gcp.chronicle.Parser("example", {
    location: "us",
    instance: "00000000-0000-0000-0000-000000000000",
    logtype: "LINUX_DHCP",
    validatedOnEmptyLogs: false,
    validationSkipped: true,
    lowCode: {
        log: "ZHVtbXkgbG9nIGJ5dGVz",
        fieldExtractors: {
            logFormat: "JSON",
            appendRepeatedFields: true,
            preprocessConfig: {
                grokRegex: "(?P<message>.*)",
                target: "message",
            },
            extractors: [
                {
                    fieldPath: "$.ip",
                    destinationPath: "udm.principal.ip",
                    preconditionOp: "EQUALS",
                    preconditionPath: "$.event",
                    preconditionValue: "login",
                },
                {
                    destinationPath: "udm.metadata.product_name",
                    value: "Google",
                },
            ],
        },
    },
    versionInfo: {
        autoUpgradeDisabled: false,
    },
});

    import pulumi
import pulumi_gcp as gcp

example = gcp.chronicle.Parser("example",
    location="us",
    instance="00000000-0000-0000-0000-000000000000",
    logtype="LINUX_DHCP",
    validated_on_empty_logs=False,
    validation_skipped=True,
    low_code={
        "log": "ZHVtbXkgbG9nIGJ5dGVz",
        "field_extractors": {
            "log_format": "JSON",
            "append_repeated_fields": True,
            "preprocess_config": {
                "grok_regex": "(?P<message>.*)",
                "target": "message",
            },
            "extractors": [
                {
                    "field_path": "$.ip",
                    "destination_path": "udm.principal.ip",
                    "precondition_op": "EQUALS",
                    "precondition_path": "$.event",
                    "precondition_value": "login",
                },
                {
                    "destination_path": "udm.metadata.product_name",
                    "value": "Google",
                },
            ],
        },
    },
    version_info={
        "auto_upgrade_disabled": False,
    })

    package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v9/go/gcp/chronicle"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := chronicle.NewParser(ctx, "example", &chronicle.ParserArgs{
			Location:             pulumi.String("us"),
			Instance:             pulumi.String("00000000-0000-0000-0000-000000000000"),
			Logtype:              pulumi.String("LINUX_DHCP"),
			ValidatedOnEmptyLogs: pulumi.Bool(false),
			ValidationSkipped:    pulumi.Bool(true),
			LowCode: &chronicle.ParserLowCodeArgs{
				Log: pulumi.String("ZHVtbXkgbG9nIGJ5dGVz"),
				FieldExtractors: &chronicle.ParserLowCodeFieldExtractorsArgs{
					LogFormat:            pulumi.String("JSON"),
					AppendRepeatedFields: pulumi.Bool(true),
					PreprocessConfig: &chronicle.ParserLowCodeFieldExtractorsPreprocessConfigArgs{
						GrokRegex: pulumi.String("(?P<message>.*)"),
						Target:    pulumi.String("message"),
					},
					Extractors: chronicle.ParserLowCodeFieldExtractorsExtractorArray{
						&chronicle.ParserLowCodeFieldExtractorsExtractorArgs{
							FieldPath:         pulumi.String("$.ip"),
							DestinationPath:   pulumi.String("udm.principal.ip"),
							PreconditionOp:    pulumi.String("EQUALS"),
							PreconditionPath:  pulumi.String("$.event"),
							PreconditionValue: pulumi.String("login"),
						},
						&chronicle.ParserLowCodeFieldExtractorsExtractorArgs{
							DestinationPath: pulumi.String("udm.metadata.product_name"),
							Value:           pulumi.String("Google"),
						},
					},
				},
			},
			VersionInfo: &chronicle.ParserVersionInfoArgs{
				AutoUpgradeDisabled: pulumi.Bool(false),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var example = new Gcp.Chronicle.Parser("example", new()
    {
        Location = "us",
        Instance = "00000000-0000-0000-0000-000000000000",
        Logtype = "LINUX_DHCP",
        ValidatedOnEmptyLogs = false,
        ValidationSkipped = true,
        LowCode = new Gcp.Chronicle.Inputs.ParserLowCodeArgs
        {
            Log = "ZHVtbXkgbG9nIGJ5dGVz",
            FieldExtractors = new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsArgs
            {
                LogFormat = "JSON",
                AppendRepeatedFields = true,
                PreprocessConfig = new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsPreprocessConfigArgs
                {
                    GrokRegex = "(?P<message>.*)",
                    Target = "message",
                },
                Extractors = new[]
                {
                    new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsExtractorArgs
                    {
                        FieldPath = "$.ip",
                        DestinationPath = "udm.principal.ip",
                        PreconditionOp = "EQUALS",
                        PreconditionPath = "$.event",
                        PreconditionValue = "login",
                    },
                    new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsExtractorArgs
                    {
                        DestinationPath = "udm.metadata.product_name",
                        Value = "Google",
                    },
                },
            },
        },
        VersionInfo = new Gcp.Chronicle.Inputs.ParserVersionInfoArgs
        {
            AutoUpgradeDisabled = false,
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.chronicle.Parser;
import com.pulumi.gcp.chronicle.ParserArgs;
import com.pulumi.gcp.chronicle.inputs.ParserLowCodeArgs;
import com.pulumi.gcp.chronicle.inputs.ParserLowCodeFieldExtractorsArgs;
import com.pulumi.gcp.chronicle.inputs.ParserLowCodeFieldExtractorsPreprocessConfigArgs;
import com.pulumi.gcp.chronicle.inputs.ParserLowCodeFieldExtractorsExtractorArgs;
import com.pulumi.gcp.chronicle.inputs.ParserVersionInfoArgs;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var example = new Parser("example", ParserArgs.builder()
            .location("us")
            .instance("00000000-0000-0000-0000-000000000000")
            .logtype("LINUX_DHCP")
            .validatedOnEmptyLogs(false)
            .validationSkipped(true)
            .lowCode(ParserLowCodeArgs.builder()
                .log("ZHVtbXkgbG9nIGJ5dGVz")
                .fieldExtractors(ParserLowCodeFieldExtractorsArgs.builder()
                    .logFormat("JSON")
                    .appendRepeatedFields(true)
                    .preprocessConfig(ParserLowCodeFieldExtractorsPreprocessConfigArgs.builder()
                        .grokRegex("(?P<message>.*)")
                        .target("message")
                        .build())
                    .extractors(                    
                        ParserLowCodeFieldExtractorsExtractorArgs.builder()
                            .fieldPath("$.ip")
                            .destinationPath("udm.principal.ip")
                            .preconditionOp("EQUALS")
                            .preconditionPath("$.event")
                            .preconditionValue("login")
                            .build(),
                        ParserLowCodeFieldExtractorsExtractorArgs.builder()
                            .destinationPath("udm.metadata.product_name")
                            .value("Google")
                            .build())
                    .build())
                .build())
            .versionInfo(ParserVersionInfoArgs.builder()
                .autoUpgradeDisabled(false)
                .build())
            .build());

    }
}

    resources:
  example:
    type: gcp:chronicle:Parser
    properties:
      location: us
      instance: 00000000-0000-0000-0000-000000000000
      logtype: LINUX_DHCP
      validatedOnEmptyLogs: false
      validationSkipped: true
      lowCode:
        log: ZHVtbXkgbG9nIGJ5dGVz
        fieldExtractors:
          logFormat: JSON
          appendRepeatedFields: true
          preprocessConfig:
            grokRegex: (?P<message>.*)
            target: message
          extractors:
            - fieldPath: $.ip
              destinationPath: udm.principal.ip
              preconditionOp: EQUALS
              preconditionPath: $.event
              preconditionValue: login
            - destinationPath: udm.metadata.product_name
              value: Google
      versionInfo:
        autoUpgradeDisabled: false

    pulumi {
  required_providers {
    gcp = {
      source = "pulumi/gcp"
    }
  }
}

resource "gcp_chronicle_parser" "example" {
  location                = "us"
  instance                = "00000000-0000-0000-0000-000000000000"
  logtype                 = "LINUX_DHCP"
  validated_on_empty_logs = false
  validation_skipped      = true
  low_code = {
    log = "ZHVtbXkgbG9nIGJ5dGVz"
    field_extractors = {
      log_format             = "JSON"
      append_repeated_fields = true
      preprocess_config = {
        grok_regex = "(?P<message>.*)"
        target     = "message"
      }
      extractors = [{
        "fieldPath"         = "$.ip"
        "destinationPath"   = "udm.principal.ip"
        "preconditionOp"    = "EQUALS"
        "preconditionPath"  = "$.event"
        "preconditionValue" = "login"
        }, {
        "destinationPath" = "udm.metadata.product_name"
        "value"           = "Google"
      }]
    }
  }
  version_info = {
    auto_upgrade_disabled = false
  }
}

    Create Parser Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Parser(name: string, args: ParserArgs, opts?: CustomResourceOptions);
    @overload
def Parser(resource_name: str,
           args: ParserArgs,
           opts: Optional[ResourceOptions] = None)

@overload
def Parser(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           instance: Optional[str] = None,
           location: Optional[str] = None,
           logtype: Optional[str] = None,
           cbn: Optional[str] = None,
           deletion_policy: Optional[str] = None,
           low_code: Optional[ParserLowCodeArgs] = None,
           project: Optional[str] = None,
           validated_on_empty_logs: Optional[bool] = None,
           validation_skipped: Optional[bool] = None,
           version_info: Optional[ParserVersionInfoArgs] = None)
    func NewParser(ctx *Context, name string, args ParserArgs, opts ...ResourceOption) (*Parser, error)
    public Parser(string name, ParserArgs args, CustomResourceOptions? opts = null)
    public Parser(String name, ParserArgs args)
public Parser(String name, ParserArgs args, CustomResourceOptions options)

    type: gcp:chronicle:Parser
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "gcp_chronicle_parser" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args ParserArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ParserArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ParserArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ParserArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ParserArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var parserResource = new Gcp.Chronicle.Parser("parserResource", new()
{
    Instance = "string",
    Location = "string",
    Logtype = "string",
    Cbn = "string",
    DeletionPolicy = "string",
    LowCode = new Gcp.Chronicle.Inputs.ParserLowCodeArgs
    {
        FieldExtractors = new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsArgs
        {
            AppendRepeatedFields = false,
            Extractors = new[]
            {
                new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsExtractorArgs
                {
                    DestinationPath = "string",
                    FieldPath = "string",
                    PreconditionOp = "string",
                    PreconditionPath = "string",
                    PreconditionValue = "string",
                    Value = "string",
                },
            },
            LogFormat = "string",
            PreprocessConfig = new Gcp.Chronicle.Inputs.ParserLowCodeFieldExtractorsPreprocessConfigArgs
            {
                GrokRegex = "string",
                Target = "string",
            },
            TransformedCbnSnippet = "string",
        },
        Log = "string",
    },
    Project = "string",
    ValidatedOnEmptyLogs = false,
    ValidationSkipped = false,
    VersionInfo = new Gcp.Chronicle.Inputs.ParserVersionInfoArgs
    {
        AutoUpgradeDisabled = false,
        LatestParser = "string",
        LatestParserVersion = "string",
        RollbackAvailable = false,
        Version = "string",
    },
});

    example, err := chronicle.NewParser(ctx, "parserResource", &chronicle.ParserArgs{
	Instance:       pulumi.String("string"),
	Location:       pulumi.String("string"),
	Logtype:        pulumi.String("string"),
	Cbn:            pulumi.String("string"),
	DeletionPolicy: pulumi.String("string"),
	LowCode: &chronicle.ParserLowCodeArgs{
		FieldExtractors: &chronicle.ParserLowCodeFieldExtractorsArgs{
			AppendRepeatedFields: pulumi.Bool(false),
			Extractors: chronicle.ParserLowCodeFieldExtractorsExtractorArray{
				&chronicle.ParserLowCodeFieldExtractorsExtractorArgs{
					DestinationPath:   pulumi.String("string"),
					FieldPath:         pulumi.String("string"),
					PreconditionOp:    pulumi.String("string"),
					PreconditionPath:  pulumi.String("string"),
					PreconditionValue: pulumi.String("string"),
					Value:             pulumi.String("string"),
				},
			},
			LogFormat: pulumi.String("string"),
			PreprocessConfig: &chronicle.ParserLowCodeFieldExtractorsPreprocessConfigArgs{
				GrokRegex: pulumi.String("string"),
				Target:    pulumi.String("string"),
			},
			TransformedCbnSnippet: pulumi.String("string"),
		},
		Log: pulumi.String("string"),
	},
	Project:              pulumi.String("string"),
	ValidatedOnEmptyLogs: pulumi.Bool(false),
	ValidationSkipped:    pulumi.Bool(false),
	VersionInfo: &chronicle.ParserVersionInfoArgs{
		AutoUpgradeDisabled: pulumi.Bool(false),
		LatestParser:        pulumi.String("string"),
		LatestParserVersion: pulumi.String("string"),
		RollbackAvailable:   pulumi.Bool(false),
		Version:             pulumi.String("string"),
	},
})

    resource "gcp_chronicle_parser" "parserResource" {
  instance        = "string"
  location        = "string"
  logtype         = "string"
  cbn             = "string"
  deletion_policy = "string"
  low_code = {
    field_extractors = {
      append_repeated_fields = false
      extractors = [{
        "destinationPath"   = "string"
        "fieldPath"         = "string"
        "preconditionOp"    = "string"
        "preconditionPath"  = "string"
        "preconditionValue" = "string"
        "value"             = "string"
      }]
      log_format = "string"
      preprocess_config = {
        grok_regex = "string"
        target     = "string"
      }
      transformed_cbn_snippet = "string"
    }
    log = "string"
  }
  project                 = "string"
  validated_on_empty_logs = false
  validation_skipped      = false
  version_info = {
    auto_upgrade_disabled = false
    latest_parser         = "string"
    latest_parser_version = "string"
    rollback_available    = false
    version               = "string"
  }
}

    var parserResource = new Parser("parserResource", ParserArgs.builder()
    .instance("string")
    .location("string")
    .logtype("string")
    .cbn("string")
    .deletionPolicy("string")
    .lowCode(ParserLowCodeArgs.builder()
        .fieldExtractors(ParserLowCodeFieldExtractorsArgs.builder()
            .appendRepeatedFields(false)
            .extractors(ParserLowCodeFieldExtractorsExtractorArgs.builder()
                .destinationPath("string")
                .fieldPath("string")
                .preconditionOp("string")
                .preconditionPath("string")
                .preconditionValue("string")
                .value("string")
                .build())
            .logFormat("string")
            .preprocessConfig(ParserLowCodeFieldExtractorsPreprocessConfigArgs.builder()
                .grokRegex("string")
                .target("string")
                .build())
            .transformedCbnSnippet("string")
            .build())
        .log("string")
        .build())
    .project("string")
    .validatedOnEmptyLogs(false)
    .validationSkipped(false)
    .versionInfo(ParserVersionInfoArgs.builder()
        .autoUpgradeDisabled(false)
        .latestParser("string")
        .latestParserVersion("string")
        .rollbackAvailable(false)
        .version("string")
        .build())
    .build());

    parser_resource = gcp.chronicle.Parser("parserResource",
    instance="string",
    location="string",
    logtype="string",
    cbn="string",
    deletion_policy="string",
    low_code={
        "field_extractors": {
            "append_repeated_fields": False,
            "extractors": [{
                "destination_path": "string",
                "field_path": "string",
                "precondition_op": "string",
                "precondition_path": "string",
                "precondition_value": "string",
                "value": "string",
            }],
            "log_format": "string",
            "preprocess_config": {
                "grok_regex": "string",
                "target": "string",
            },
            "transformed_cbn_snippet": "string",
        },
        "log": "string",
    },
    project="string",
    validated_on_empty_logs=False,
    validation_skipped=False,
    version_info={
        "auto_upgrade_disabled": False,
        "latest_parser": "string",
        "latest_parser_version": "string",
        "rollback_available": False,
        "version": "string",
    })

    const parserResource = new gcp.chronicle.Parser("parserResource", {
    instance: "string",
    location: "string",
    logtype: "string",
    cbn: "string",
    deletionPolicy: "string",
    lowCode: {
        fieldExtractors: {
            appendRepeatedFields: false,
            extractors: [{
                destinationPath: "string",
                fieldPath: "string",
                preconditionOp: "string",
                preconditionPath: "string",
                preconditionValue: "string",
                value: "string",
            }],
            logFormat: "string",
            preprocessConfig: {
                grokRegex: "string",
                target: "string",
            },
            transformedCbnSnippet: "string",
        },
        log: "string",
    },
    project: "string",
    validatedOnEmptyLogs: false,
    validationSkipped: false,
    versionInfo: {
        autoUpgradeDisabled: false,
        latestParser: "string",
        latestParserVersion: "string",
        rollbackAvailable: false,
        version: "string",
    },
});

    type: gcp:chronicle:Parser
properties:
    cbn: string
    deletionPolicy: string
    instance: string
    location: string
    logtype: string
    lowCode:
        fieldExtractors:
            appendRepeatedFields: false
            extractors:
                - destinationPath: string
                  fieldPath: string
                  preconditionOp: string
                  preconditionPath: string
                  preconditionValue: string
                  value: string
            logFormat: string
            preprocessConfig:
                grokRegex: string
                target: string
            transformedCbnSnippet: string
        log: string
    project: string
    validatedOnEmptyLogs: false
    validationSkipped: false
    versionInfo:
        autoUpgradeDisabled: false
        latestParser: string
        latestParserVersion: string
        rollbackAvailable: false
        version: string

    Parser Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Parser resource accepts the following input properties:

    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    LowCode ParserLowCode
    Message to represent LowCodeParser. Structure is documented below.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    ValidatedOnEmptyLogs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    ValidationSkipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    VersionInfo ParserVersionInfo
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    LowCode ParserLowCodeArgs
    Message to represent LowCodeParser. Structure is documented below.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    ValidatedOnEmptyLogs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    ValidationSkipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    VersionInfo ParserVersionInfoArgs
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    deletion_policy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    low_code object
    Message to represent LowCodeParser. Structure is documented below.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    validated_on_empty_logs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validation_skipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    version_info object
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    cbn String
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    lowCode ParserLowCode
    Message to represent LowCodeParser. Structure is documented below.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    validatedOnEmptyLogs Boolean
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validationSkipped Boolean
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    versionInfo ParserVersionInfo
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    deletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    lowCode ParserLowCode
    Message to represent LowCodeParser. Structure is documented below.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    validatedOnEmptyLogs boolean
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validationSkipped boolean
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    versionInfo ParserVersionInfo
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    instance str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    cbn str
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    deletion_policy str
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    low_code ParserLowCodeArgs
    Message to represent LowCodeParser. Structure is documented below.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    validated_on_empty_logs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validation_skipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    version_info ParserVersionInfoArgs
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    cbn String
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    lowCode Property Map
    Message to represent LowCodeParser. Structure is documented below.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    validatedOnEmptyLogs Boolean
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validationSkipped Boolean
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    versionInfo Property Map
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Parser resource produces the following output properties:

    Changelogs List<ParserChangelog>
    Changelogs of a parser. Structure is documented below.
    CreateTime string
    (Output) Time at which changelog was created.
    Creators List<ParserCreator>
    Information about the creator of the parser. Structure is documented below.
    DynamicParsingConfig string
    Dynamic parsing config applied over the parser, if any.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    name of the parser resource.
    ParserExtension string
    Extension applied over the parser, if any.
    ParserId string
    Output only. The server-generated ID of the parser.
    ReleaseStage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    State string
    The state of the parser Possible values: ACTIVE INACTIVE
    Type string
    The type of the parser Possible values: CUSTOM PREBUILT
    ValidationReport string
    The Validation report generated during parser validation.
    ValidationStage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    Changelogs []ParserChangelog
    Changelogs of a parser. Structure is documented below.
    CreateTime string
    (Output) Time at which changelog was created.
    Creators []ParserCreator
    Information about the creator of the parser. Structure is documented below.
    DynamicParsingConfig string
    Dynamic parsing config applied over the parser, if any.
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    name of the parser resource.
    Parser string
    Output only. The server-generated ID of the parser.
    ParserExtension string
    Extension applied over the parser, if any.
    ReleaseStage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    State string
    The state of the parser Possible values: ACTIVE INACTIVE
    Type string
    The type of the parser Possible values: CUSTOM PREBUILT
    ValidationReport string
    The Validation report generated during parser validation.
    ValidationStage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    changelogs list(object)
    Changelogs of a parser. Structure is documented below.
    create_time string
    (Output) Time at which changelog was created.
    creators list(object)
    Information about the creator of the parser. Structure is documented below.
    dynamic_parsing_config string
    Dynamic parsing config applied over the parser, if any.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    name of the parser resource.
    parser string
    Output only. The server-generated ID of the parser.
    parser_extension string
    Extension applied over the parser, if any.
    release_stage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state string
    The state of the parser Possible values: ACTIVE INACTIVE
    type string
    The type of the parser Possible values: CUSTOM PREBUILT
    validation_report string
    The Validation report generated during parser validation.
    validation_stage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    changelogs List<ParserChangelog>
    Changelogs of a parser. Structure is documented below.
    createTime String
    (Output) Time at which changelog was created.
    creators List<ParserCreator>
    Information about the creator of the parser. Structure is documented below.
    dynamicParsingConfig String
    Dynamic parsing config applied over the parser, if any.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    name of the parser resource.
    parser String
    Output only. The server-generated ID of the parser.
    parserExtension String
    Extension applied over the parser, if any.
    releaseStage String
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state String
    The state of the parser Possible values: ACTIVE INACTIVE
    type String
    The type of the parser Possible values: CUSTOM PREBUILT
    validationReport String
    The Validation report generated during parser validation.
    validationStage String
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    changelogs ParserChangelog[]
    Changelogs of a parser. Structure is documented below.
    createTime string
    (Output) Time at which changelog was created.
    creators ParserCreator[]
    Information about the creator of the parser. Structure is documented below.
    dynamicParsingConfig string
    Dynamic parsing config applied over the parser, if any.
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    name of the parser resource.
    parser string
    Output only. The server-generated ID of the parser.
    parserExtension string
    Extension applied over the parser, if any.
    releaseStage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state string
    The state of the parser Possible values: ACTIVE INACTIVE
    type string
    The type of the parser Possible values: CUSTOM PREBUILT
    validationReport string
    The Validation report generated during parser validation.
    validationStage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    changelogs Sequence[ParserChangelog]
    Changelogs of a parser. Structure is documented below.
    create_time str
    (Output) Time at which changelog was created.
    creators Sequence[ParserCreator]
    Information about the creator of the parser. Structure is documented below.
    dynamic_parsing_config str
    Dynamic parsing config applied over the parser, if any.
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    name of the parser resource.
    parser str
    Output only. The server-generated ID of the parser.
    parser_extension str
    Extension applied over the parser, if any.
    release_stage str
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state str
    The state of the parser Possible values: ACTIVE INACTIVE
    type str
    The type of the parser Possible values: CUSTOM PREBUILT
    validation_report str
    The Validation report generated during parser validation.
    validation_stage str
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    changelogs List<Property Map>
    Changelogs of a parser. Structure is documented below.
    createTime String
    (Output) Time at which changelog was created.
    creators List<Property Map>
    Information about the creator of the parser. Structure is documented below.
    dynamicParsingConfig String
    Dynamic parsing config applied over the parser, if any.
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    name of the parser resource.
    parser String
    Output only. The server-generated ID of the parser.
    parserExtension String
    Extension applied over the parser, if any.
    releaseStage String
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state String
    The state of the parser Possible values: ACTIVE INACTIVE
    type String
    The type of the parser Possible values: CUSTOM PREBUILT
    validationReport String
    The Validation report generated during parser validation.
    validationStage String
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED

    Look up Existing Parser Resource

    Get an existing Parser resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ParserState, opts?: CustomResourceOptions): Parser
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        cbn: Optional[str] = None,
        changelogs: Optional[Sequence[ParserChangelogArgs]] = None,
        create_time: Optional[str] = None,
        creators: Optional[Sequence[ParserCreatorArgs]] = None,
        deletion_policy: Optional[str] = None,
        dynamic_parsing_config: Optional[str] = None,
        instance: Optional[str] = None,
        location: Optional[str] = None,
        logtype: Optional[str] = None,
        low_code: Optional[ParserLowCodeArgs] = None,
        name: Optional[str] = None,
        parser: Optional[str] = None,
        parser_extension: Optional[str] = None,
        project: Optional[str] = None,
        release_stage: Optional[str] = None,
        state: Optional[str] = None,
        type: Optional[str] = None,
        validated_on_empty_logs: Optional[bool] = None,
        validation_report: Optional[str] = None,
        validation_skipped: Optional[bool] = None,
        validation_stage: Optional[str] = None,
        version_info: Optional[ParserVersionInfoArgs] = None) -> Parser
    func GetParser(ctx *Context, name string, id IDInput, state *ParserState, opts ...ResourceOption) (*Parser, error)
    public static Parser Get(string name, Input<string> id, ParserState? state, CustomResourceOptions? opts = null)
    public static Parser get(String name, Output<String> id, ParserState state, CustomResourceOptions options)
    resources:  _:    type: gcp:chronicle:Parser    get:      id: ${id}
    import {
  to = gcp_chronicle_parser.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    Changelogs List<ParserChangelog>
    Changelogs of a parser. Structure is documented below.
    CreateTime string
    (Output) Time at which changelog was created.
    Creators List<ParserCreator>
    Information about the creator of the parser. Structure is documented below.
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    DynamicParsingConfig string
    Dynamic parsing config applied over the parser, if any.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    LowCode ParserLowCode
    Message to represent LowCodeParser. Structure is documented below.
    Name string
    name of the parser resource.
    ParserExtension string
    Extension applied over the parser, if any.
    ParserId string
    Output only. The server-generated ID of the parser.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    ReleaseStage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    State string
    The state of the parser Possible values: ACTIVE INACTIVE
    Type string
    The type of the parser Possible values: CUSTOM PREBUILT
    ValidatedOnEmptyLogs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    ValidationReport string
    The Validation report generated during parser validation.
    ValidationSkipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    ValidationStage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    VersionInfo ParserVersionInfo
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    Cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    Changelogs []ParserChangelogArgs
    Changelogs of a parser. Structure is documented below.
    CreateTime string
    (Output) Time at which changelog was created.
    Creators []ParserCreatorArgs
    Information about the creator of the parser. Structure is documented below.
    DeletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    DynamicParsingConfig string
    Dynamic parsing config applied over the parser, if any.
    Instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    Logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    LowCode ParserLowCodeArgs
    Message to represent LowCodeParser. Structure is documented below.
    Name string
    name of the parser resource.
    Parser string
    Output only. The server-generated ID of the parser.
    ParserExtension string
    Extension applied over the parser, if any.
    Project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    ReleaseStage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    State string
    The state of the parser Possible values: ACTIVE INACTIVE
    Type string
    The type of the parser Possible values: CUSTOM PREBUILT
    ValidatedOnEmptyLogs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    ValidationReport string
    The Validation report generated during parser validation.
    ValidationSkipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    ValidationStage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    VersionInfo ParserVersionInfoArgs
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    changelogs list(object)
    Changelogs of a parser. Structure is documented below.
    create_time string
    (Output) Time at which changelog was created.
    creators list(object)
    Information about the creator of the parser. Structure is documented below.
    deletion_policy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    dynamic_parsing_config string
    Dynamic parsing config applied over the parser, if any.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    low_code object
    Message to represent LowCodeParser. Structure is documented below.
    name string
    name of the parser resource.
    parser string
    Output only. The server-generated ID of the parser.
    parser_extension string
    Extension applied over the parser, if any.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    release_stage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state string
    The state of the parser Possible values: ACTIVE INACTIVE
    type string
    The type of the parser Possible values: CUSTOM PREBUILT
    validated_on_empty_logs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validation_report string
    The Validation report generated during parser validation.
    validation_skipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    validation_stage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    version_info object
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    cbn String
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    changelogs List<ParserChangelog>
    Changelogs of a parser. Structure is documented below.
    createTime String
    (Output) Time at which changelog was created.
    creators List<ParserCreator>
    Information about the creator of the parser. Structure is documented below.
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    dynamicParsingConfig String
    Dynamic parsing config applied over the parser, if any.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    lowCode ParserLowCode
    Message to represent LowCodeParser. Structure is documented below.
    name String
    name of the parser resource.
    parser String
    Output only. The server-generated ID of the parser.
    parserExtension String
    Extension applied over the parser, if any.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    releaseStage String
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state String
    The state of the parser Possible values: ACTIVE INACTIVE
    type String
    The type of the parser Possible values: CUSTOM PREBUILT
    validatedOnEmptyLogs Boolean
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validationReport String
    The Validation report generated during parser validation.
    validationSkipped Boolean
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    validationStage String
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    versionInfo ParserVersionInfo
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    cbn string
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    changelogs ParserChangelog[]
    Changelogs of a parser. Structure is documented below.
    createTime string
    (Output) Time at which changelog was created.
    creators ParserCreator[]
    Information about the creator of the parser. Structure is documented below.
    deletionPolicy string
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    dynamicParsingConfig string
    Dynamic parsing config applied over the parser, if any.
    instance string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype string
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    lowCode ParserLowCode
    Message to represent LowCodeParser. Structure is documented below.
    name string
    name of the parser resource.
    parser string
    Output only. The server-generated ID of the parser.
    parserExtension string
    Extension applied over the parser, if any.
    project string
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    releaseStage string
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state string
    The state of the parser Possible values: ACTIVE INACTIVE
    type string
    The type of the parser Possible values: CUSTOM PREBUILT
    validatedOnEmptyLogs boolean
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validationReport string
    The Validation report generated during parser validation.
    validationSkipped boolean
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    validationStage string
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    versionInfo ParserVersionInfo
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    cbn str
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    changelogs Sequence[ParserChangelogArgs]
    Changelogs of a parser. Structure is documented below.
    create_time str
    (Output) Time at which changelog was created.
    creators Sequence[ParserCreatorArgs]
    Information about the creator of the parser. Structure is documented below.
    deletion_policy str
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    dynamic_parsing_config str
    Dynamic parsing config applied over the parser, if any.
    instance str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype str
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    low_code ParserLowCodeArgs
    Message to represent LowCodeParser. Structure is documented below.
    name str
    name of the parser resource.
    parser str
    Output only. The server-generated ID of the parser.
    parser_extension str
    Extension applied over the parser, if any.
    project str
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    release_stage str
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state str
    The state of the parser Possible values: ACTIVE INACTIVE
    type str
    The type of the parser Possible values: CUSTOM PREBUILT
    validated_on_empty_logs bool
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validation_report str
    The Validation report generated during parser validation.
    validation_skipped bool
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    validation_stage str
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    version_info ParserVersionInfoArgs
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.
    cbn String
    if the parser is built using config documentation: https://cloud.google.com/chronicle/docs/preview/parser-extensions/parsing-overview
    changelogs List<Property Map>
    Changelogs of a parser. Structure is documented below.
    createTime String
    (Output) Time at which changelog was created.
    creators List<Property Map>
    Information about the creator of the parser. Structure is documented below.
    deletionPolicy String
    Whether Terraform will be prevented from destroying the resource. Defaults to DELETE. When a 'terraform destroy' or 'pulumi up' would delete the resource, the command will fail if this field is set to "PREVENT" in Terraform state. When set to "ABANDON", the command will remove the resource from Terraform management without updating or deleting the resource in the API. When set to "DELETE", deleting the resource is allowed.
    dynamicParsingConfig String
    Dynamic parsing config applied over the parser, if any.
    instance String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    location String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    logtype String
    Resource ID segment making up resource name. It identifies the resource within its parent collection as described in https://google.aip.dev/122.
    lowCode Property Map
    Message to represent LowCodeParser. Structure is documented below.
    name String
    name of the parser resource.
    parser String
    Output only. The server-generated ID of the parser.
    parserExtension String
    Extension applied over the parser, if any.
    project String
    The ID of the project in which the resource belongs. If it is not provided, the provider project is used.
    releaseStage String
    The release stage of the parser After internal validations the prebuilt parser will directly start as Release Candidate. The releaseStage of prebuilt parsers are changed after every release cycle: The prebuilt Release Candidate parser is promoted as Release parser. The existing prebuilt Release parser is moved to Rollback state. and existing prebuilt rollback parser is moved to Archived. In case of custom parser: When the customer submits a validation passed custom parser it starts as Release state. And existing one is moved to Rollback stage. And the existing rollback is moved to Archived. In case a release or release candidate parser is found faulty, the parser is marked FAULTY, if it is release parser then rollback candidate is moved to release. Possible values: RELEASE RELEASE_CANDIDATE ROLLBACK_CANDIDATE ARCHIVED FAULTY ARCHIVED_IN_USE
    state String
    The state of the parser Possible values: ACTIVE INACTIVE
    type String
    The type of the parser Possible values: CUSTOM PREBUILT
    validatedOnEmptyLogs Boolean
    Flag to bypass parser validation when no logs are found. If enabled, the parser won't be be rejected during the validation phase when no logs are found.
    validationReport String
    The Validation report generated during parser validation.
    validationSkipped Boolean
    If true, bypasses parser validation. If enabled, the parser won't be rejected during the validation phase and validation will be skipped.
    validationStage String
    The validation stage of the parser When a customer submits a new parser for validation, it starts with a new stage. When parser is picked for validation, it changes to Validation state. If validation failed it is marked as failed, and existing failed is moved to deleteCandidate stage. If passes it is moved to passed stage. If customer opts to submit it, the parser is moved to Release State. Possible values: NEW VALIDATING PASSED FAILED DELETE_CANDIDATE INTERNAL_ERROR VALIDATION_SKIPPED
    versionInfo Property Map
    ParserVersionInfo gives the version information of the parser and related properties like pinned etc. Structure is documented below.

    Supporting Types

    ParserChangelog, ParserChangelogArgs

    Entries List<ParserChangelogEntry>
    all the changelog of a parser. Structure is documented below.
    Entries []ParserChangelogEntry
    all the changelog of a parser. Structure is documented below.
    entries list(object)
    all the changelog of a parser. Structure is documented below.
    entries List<ParserChangelogEntry>
    all the changelog of a parser. Structure is documented below.
    entries ParserChangelogEntry[]
    all the changelog of a parser. Structure is documented below.
    entries Sequence[ParserChangelogEntry]
    all the changelog of a parser. Structure is documented below.
    entries List<Property Map>
    all the changelog of a parser. Structure is documented below.

    ParserChangelogEntry, ParserChangelogEntryArgs

    ChangeMessage string
    (Output) The changelog message.
    CreateTime string
    (Output) Time at which changelog was created.
    Deleted bool
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    ParserVersion string
    (Output) The parser version for which the changelog is created.
    ChangeMessage string
    (Output) The changelog message.
    CreateTime string
    (Output) Time at which changelog was created.
    Deleted bool
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    ParserVersion string
    (Output) The parser version for which the changelog is created.
    change_message string
    (Output) The changelog message.
    create_time string
    (Output) Time at which changelog was created.
    deleted bool
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    parser_version string
    (Output) The parser version for which the changelog is created.
    changeMessage String
    (Output) The changelog message.
    createTime String
    (Output) Time at which changelog was created.
    deleted Boolean
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    parserVersion String
    (Output) The parser version for which the changelog is created.
    changeMessage string
    (Output) The changelog message.
    createTime string
    (Output) Time at which changelog was created.
    deleted boolean
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    parserVersion string
    (Output) The parser version for which the changelog is created.
    change_message str
    (Output) The changelog message.
    create_time str
    (Output) Time at which changelog was created.
    deleted bool
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    parser_version str
    (Output) The parser version for which the changelog is created.
    changeMessage String
    (Output) The changelog message.
    createTime String
    (Output) Time at which changelog was created.
    deleted Boolean
    (Output) Flag whether the entry is added or deleted. This will be true in case of rollback and false in case of upgrade.
    parserVersion String
    (Output) The parser version for which the changelog is created.

    ParserCreator, ParserCreatorArgs

    Author string
    (Output) The name of the author, who created this parser.
    Customer string
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    Source string
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER
    Author string
    (Output) The name of the author, who created this parser.
    Customer string
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    Source string
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER
    author string
    (Output) The name of the author, who created this parser.
    customer string
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    source string
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER
    author String
    (Output) The name of the author, who created this parser.
    customer String
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    source String
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER
    author string
    (Output) The name of the author, who created this parser.
    customer string
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    source string
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER
    author str
    (Output) The name of the author, who created this parser.
    customer str
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    source str
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER
    author String
    (Output) The name of the author, who created this parser.
    customer String
    (Output) The customer who created it, This can represent the partner as well. In case of prebuilt parser this will be empty.
    source String
    (Output) The source of the parser. Possible values: GOOGLE CUSTOM_GOOGLE_OVERRIDE PARTNER CUSTOMER

    ParserLowCode, ParserLowCodeArgs

    FieldExtractors ParserLowCodeFieldExtractors
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    Log string
    The log used to create this low code parser in the UI.
    FieldExtractors ParserLowCodeFieldExtractors
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    Log string
    The log used to create this low code parser in the UI.
    field_extractors object
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    log string
    The log used to create this low code parser in the UI.
    fieldExtractors ParserLowCodeFieldExtractors
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    log String
    The log used to create this low code parser in the UI.
    fieldExtractors ParserLowCodeFieldExtractors
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    log string
    The log used to create this low code parser in the UI.
    field_extractors ParserLowCodeFieldExtractors
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    log str
    The log used to create this low code parser in the UI.
    fieldExtractors Property Map
    A representation of a parser extension as a set of field extractors. Structure is documented below.
    log String
    The log used to create this low code parser in the UI.

    ParserLowCodeFieldExtractors, ParserLowCodeFieldExtractorsArgs

    AppendRepeatedFields bool
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    Extractors List<ParserLowCodeFieldExtractorsExtractor>
    List of FieldExtractors. Structure is documented below.
    LogFormat string
    Possible values: JSON CSV XML
    PreprocessConfig ParserLowCodeFieldExtractorsPreprocessConfig
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    TransformedCbnSnippet string
    (Output) CBN snippet generated from field extractors.
    AppendRepeatedFields bool
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    Extractors []ParserLowCodeFieldExtractorsExtractor
    List of FieldExtractors. Structure is documented below.
    LogFormat string
    Possible values: JSON CSV XML
    PreprocessConfig ParserLowCodeFieldExtractorsPreprocessConfig
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    TransformedCbnSnippet string
    (Output) CBN snippet generated from field extractors.
    append_repeated_fields bool
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    extractors list(object)
    List of FieldExtractors. Structure is documented below.
    log_format string
    Possible values: JSON CSV XML
    preprocess_config object
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    transformed_cbn_snippet string
    (Output) CBN snippet generated from field extractors.
    appendRepeatedFields Boolean
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    extractors List<ParserLowCodeFieldExtractorsExtractor>
    List of FieldExtractors. Structure is documented below.
    logFormat String
    Possible values: JSON CSV XML
    preprocessConfig ParserLowCodeFieldExtractorsPreprocessConfig
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    transformedCbnSnippet String
    (Output) CBN snippet generated from field extractors.
    appendRepeatedFields boolean
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    extractors ParserLowCodeFieldExtractorsExtractor[]
    List of FieldExtractors. Structure is documented below.
    logFormat string
    Possible values: JSON CSV XML
    preprocessConfig ParserLowCodeFieldExtractorsPreprocessConfig
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    transformedCbnSnippet string
    (Output) CBN snippet generated from field extractors.
    append_repeated_fields bool
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    extractors Sequence[ParserLowCodeFieldExtractorsExtractor]
    List of FieldExtractors. Structure is documented below.
    log_format str
    Possible values: JSON CSV XML
    preprocess_config ParserLowCodeFieldExtractorsPreprocessConfig
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    transformed_cbn_snippet str
    (Output) CBN snippet generated from field extractors.
    appendRepeatedFields Boolean
    Whether to append repeated fields or not. When false, repeated fields will be replaced.
    extractors List<Property Map>
    List of FieldExtractors. Structure is documented below.
    logFormat String
    Possible values: JSON CSV XML
    preprocessConfig Property Map
    PreProcessConfig holds the GROK expression to extract the syslog header. Structure is documented below.
    transformedCbnSnippet String
    (Output) CBN snippet generated from field extractors.

    ParserLowCodeFieldExtractorsExtractor, ParserLowCodeFieldExtractorsExtractorArgs

    DestinationPath string
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    FieldPath string
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    PreconditionOp string
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    PreconditionPath string
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    PreconditionValue string
    Precondition value.
    Value string
    Value to be mapped to the destination path directly.
    DestinationPath string
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    FieldPath string
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    PreconditionOp string
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    PreconditionPath string
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    PreconditionValue string
    Precondition value.
    Value string
    Value to be mapped to the destination path directly.
    destination_path string
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    field_path string
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    precondition_op string
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    precondition_path string
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    precondition_value string
    Precondition value.
    value string
    Value to be mapped to the destination path directly.
    destinationPath String
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    fieldPath String
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    preconditionOp String
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    preconditionPath String
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    preconditionValue String
    Precondition value.
    value String
    Value to be mapped to the destination path directly.
    destinationPath string
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    fieldPath string
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    preconditionOp string
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    preconditionPath string
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    preconditionValue string
    Precondition value.
    value string
    Value to be mapped to the destination path directly.
    destination_path str
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    field_path str
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    precondition_op str
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    precondition_path str
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    precondition_value str
    Precondition value.
    value str
    Value to be mapped to the destination path directly.
    destinationPath String
    Path in generated event which is to be populated. This is required if the FieldExtractor is used to specify the parser extension.
    fieldPath String
    Field path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log. This is required if the FieldExtractor is used to specify the parser extension.
    preconditionOp String
    Operator used for precondition. Possible values: EQUALS NOT_EQUALS
    preconditionPath String
    Precondition path could be a json path, xml path or csv column name depending on log format. It refers to a section or substring in raw log.
    preconditionValue String
    Precondition value.
    value String
    Value to be mapped to the destination path directly.

    ParserLowCodeFieldExtractorsPreprocessConfig, ParserLowCodeFieldExtractorsPreprocessConfigArgs

    GrokRegex string
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    Target string
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.
    GrokRegex string
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    Target string
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.
    grok_regex string
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    target string
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.
    grokRegex String
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    target String
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.
    grokRegex string
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    target string
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.
    grok_regex str
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    target str
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.
    grokRegex String
    GROK Regex to extract the structured part of the log. syntax documentation: www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html
    target String
    Target field name for the structured part of the log. This should match a SEMANTIC identifier from the grok expression.

    ParserVersionInfo, ParserVersionInfoArgs

    AutoUpgradeDisabled bool
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    LatestParser string
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    LatestParserVersion string
    (Output) The version for the latest available stable version of the parser.
    RollbackAvailable bool
    (Output) Signifies if rollback is available for this parser version.
    Version string
    (Output) The version of the parser.
    AutoUpgradeDisabled bool
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    LatestParser string
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    LatestParserVersion string
    (Output) The version for the latest available stable version of the parser.
    RollbackAvailable bool
    (Output) Signifies if rollback is available for this parser version.
    Version string
    (Output) The version of the parser.
    auto_upgrade_disabled bool
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    latest_parser string
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    latest_parser_version string
    (Output) The version for the latest available stable version of the parser.
    rollback_available bool
    (Output) Signifies if rollback is available for this parser version.
    version string
    (Output) The version of the parser.
    autoUpgradeDisabled Boolean
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    latestParser String
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    latestParserVersion String
    (Output) The version for the latest available stable version of the parser.
    rollbackAvailable Boolean
    (Output) Signifies if rollback is available for this parser version.
    version String
    (Output) The version of the parser.
    autoUpgradeDisabled boolean
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    latestParser string
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    latestParserVersion string
    (Output) The version for the latest available stable version of the parser.
    rollbackAvailable boolean
    (Output) Signifies if rollback is available for this parser version.
    version string
    (Output) The version of the parser.
    auto_upgrade_disabled bool
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    latest_parser str
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    latest_parser_version str
    (Output) The version for the latest available stable version of the parser.
    rollback_available bool
    (Output) Signifies if rollback is available for this parser version.
    version str
    (Output) The version of the parser.
    autoUpgradeDisabled Boolean
    Signifies if the parser is disabled for auto upgrade. If true, the parser will not be upgraded by the auto upgrade process.
    latestParser String
    (Output) The resource name of latest Parser for this logtype. Format: projects/{project}/locations/{region}/instances/{instance}/logTypes/{log_type}/parsers/{parser}/{id}
    latestParserVersion String
    (Output) The version for the latest available stable version of the parser.
    rollbackAvailable Boolean
    (Output) Signifies if rollback is available for this parser version.
    version String
    (Output) The version of the parser.

    Import

    Parser can be imported using any of these accepted formats:

    • projects/{{project}}/locations/{{location}}/instances/{{instance}}/logTypes/{{logtype}}/parsers/{{parser}}
    • {{project}}/{{location}}/{{instance}}/{{logtype}}/{{parser}}
    • {{location}}/{{instance}}/{{logtype}}/{{parser}}

    When using the pulumi import command, Parser can be imported using one of the formats above. For example:

    $ pulumi import gcp:chronicle/parser:Parser default projects/{{project}}/locations/{{location}}/instances/{{instance}}/logTypes/{{logtype}}/parsers/{{parser}}
$ pulumi import gcp:chronicle/parser:Parser default {{project}}/{{location}}/{{instance}}/{{logtype}}/{{parser}}
$ pulumi import gcp:chronicle/parser:Parser default {{location}}/{{instance}}/{{logtype}}/{{parser}}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Google Cloud (GCP) Classic pulumi/pulumi-gcp
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the google-beta Terraform Provider.
    gcp logo
    Viewing docs for Google Cloud v9.28.0
    published on Monday, Jun 22, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-gcp

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial